3 ms·
I've never heard of this. It sounds like a solid default to me. If you _really_ need an update you can override it, but it should remain the default and not all
by deevus 1y ago
I've never heard of this. It sounds like a solid default to me. If you _really_ need an update you can override it, but it should remain the default and not allow opting out.
- deevus 1y agohttps://github.com/pnpm/pnpm/issues/9921 https://github.com/pnpm/pnpm/issues/9921
- artursapek 1y agothe funny thing about this is if everyone has the same cooldown, aren’t we back in the same boat? sure there are other ways for the package maintainer to notice they were pwned, but often they will not notice.
- Raed667 1y agoThe cool down isn't for end users. It is for package maintainers and scanners.
- jamietanna 1y agoWe (Renovate maintainers) are also making this an inbuilt "best practice" that users who already opt into using the `config:best-practices` preset will start getting for free! https://github.com/renovatebot/renovate/pull/37967 https://github.com/renovatebot/renovate/pull/37967